CVEvulnerability

CVE-2006-3277

5.0 MEDIUM Published 2006-06-28 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-06-28
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-399

Description

The SMTP service of MailEnable Standard 1.92 and earlier, Professional 2.0 and earlier, and Enterprise 2.0 and earlier before the MESMTPC hotfix, allows remote attackers to cause a denial of service (application crash) via a HELO command with a null byte in the argument, possibly triggering a length inconsistency or a missing argument.

Affected configurations

• mailenable mailenable enterprise (<= 1.00) • mailenable mailenable enterprise (<= 1.01) • mailenable mailenable enterprise (<= 1.1) • mailenable mailenable enterprise (<= 1.2) • mailenable mailenable enterprise (<= 1.02) • mailenable mailenable enterprise (<= 1.03) • mailenable mailenable enterprise (<= 1.04) • mailenable mailenable enterprise (<= 1.21) • mailenable mailenable professional 1.0.004 • mailenable mailenable professional 1.0.005 • mailenable mailenable professional 1.0.006 • mailenable mailenable professional 1.0.007 • mailenable mailenable professional 1.0.008 • mailenable mailenable professional 1.0.009 • mailenable mailenable professional 1.0.010 • mailenable mailenable professional 1.0.011 • mailenable mailenable professional 1.0.012 • mailenable mailenable professional 1.0.013 • mailenable mailenable professional 1.0.014 • mailenable mailenable professional 1.0.015 • mailenable mailenable professional 1.0.016 • mailenable mailenable professional 1.0.017 • mailenable mailenable professional 1.1 • mailenable mailenable professional 1.2 • mailenable mailenable professional 1.2a • mailenable mailenable professional 1.5 • mailenable mailenable professional 1.6 • mailenable mailenable professional 1.7 • mailenable mailenable professional 1.8 • mailenable mailenable professional 1.9 • mailenable mailenable professional 1.12 • mailenable mailenable professional 1.13 • mailenable mailenable professional 1.14 • mailenable mailenable professional 1.15 • mailenable mailenable professional 1.16 • mailenable mailenable professional 1.17 • mailenable mailenable professional 1.18 • mailenable mailenable professional 1.19 • mailenable mailenable professional 1.51 • mailenable mailenable professional 1.52 • mailenable mailenable professional 1.53 • mailenable mailenable professional 1.54 • mailenable mailenable professional 1.71 • mailenable mailenable professional 1.72 • mailenable mailenable professional 1.73 • mailenable mailenable professional 1.91 • mailenable mailenable professional 1.92 • mailenable mailenable professional 1.93 • mailenable mailenable professional 1.101 • mailenable mailenable professional 1.102 • mailenable mailenable professional 1.103 • mailenable mailenable professional 1.104 • mailenable mailenable professional 1.105 • mailenable mailenable professional 1.106 • mailenable mailenable professional 1.107 • mailenable mailenable professional 1.108 • mailenable mailenable professional 1.109 • mailenable mailenable professional 1.110 • mailenable mailenable professional 1.111 • mailenable mailenable professional 1.112 … and 13 more

Related

Weakness · not in database (1)

References